- handle authentication message